This page was not yet optimized for use on mobile devices.

Panorama 10.2 M-200, M-300, M-600 and M-700

Certificate #5367

Webpage information

Status	active
Validation dates	06.07.2026
Sunset date	22-08-2029
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	MultiChipStand
Caveat	When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Exceptions	Roles, services, and authentication: Level 3 Operational environment: N/A Non-invasive security: N/A Life-cycle assurance: Level 3 Mitigation of other attacks: N/A
Description	The Panorama 10.2 running on M-200, M-300, M-600 and M-700 from Palo Alto Networks Inc., hereafter referred to as "Panorama M-Series", "Panorama HW", "modules", or the "cryptographic modules" are multi-chip standalone cryptographic modules designed to fulfill FIPS 140-3 level 2 requirements. Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.
Vendor	Palo Alto Networks Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES-256, AES-128, AES-192, AES, AES-, CAST, HMAC

Asymmetric Algorithms

RSA 2048, RSA 3072, RSA 4096, ECDH, ECDHE, ECDSA, ECC, DH, Diffie-Hellman, DHE

Hash functions

SHA-1, SHA-256

Schemes

MAC, Key Agreement

Protocols

SSH, SSHv2, TLS, TLSv1.2, TLS 1.2

Randomness

DRBG, RBG

Elliptic Curves

P-256, P-384, P-521

Block cipher modes

ECB, CBC, CTR, CFB, GCM

TLS cipher suites

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Trusted Execution Environments

PSP, SSC

Security level

level 2, Level 1, Level 8, Level 2

Certification process

out of scope, in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from

Standards

FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-2, FIPS18, FIPS186, SP 800-38A, SP 800-38D, SP 800-90A, SP 800-56A, SP 800-135, SP 800-90B, PKCS 1, RFC 5288, RFC 5246

File metadata

Creation date	D:20260706103113-04'00'
Modification date	D:20260706103113-04'00'
Pages	82
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

17.08.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf.
06.07.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5367,
  "dgst": "eac627facfe5f552",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "10.2"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 13
          },
          "ECDH": {
            "ECDH": 9,
            "ECDHE": 2
          },
          "ECDSA": {
            "ECDSA": 112
          }
        },
        "FF": {
          "DH": {
            "DH": 3,
            "DHE": 2,
            "Diffie-Hellman": 1
          }
        },
        "RSA": {
          "RSA 2048": 11,
          "RSA 3072": 1,
          "RSA 4096": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 15
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 177,
          "SSHv2": 69
        },
        "TLS": {
          "TLS": {
            "TLS": 104,
            "TLS 1.2": 3,
            "TLSv1.2": 93
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 4
        },
        "MAC": {
          "MAC": 11
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 22,
          "P-384": 24,
          "P-521": 22
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#11": 2,
          "#12": 2,
          "#13": 2,
          "#14": 2,
          "#15": 2,
          "#18": 2,
          "#19": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 2,
          "AES (128": 1,
          "AES 128/192/256": 1,
          "AES 256": 2,
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 3,
          "HMAC- SHA-1": 1,
          "HMAC- SHA-256": 1,
          "HMAC-SHA- 160": 1,
          "HMAC-SHA- 160, 256": 1,
          "HMAC-SHA-1": 4,
          "PKCS 1": 2,
          "RSA 2048": 11,
          "RSA 3072": 1,
          "RSA 4096": 1,
          "SHA-1": 6,
          "SHA-256": 8,
          "SHA2- 224": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 3,
          "SHA2- 512": 2,
          "SHA2-224": 3,
          "SHA2-256": 11,
          "SHA2-384": 4,
          "SHA2-512": 5
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 1,
          "Level 8": 1,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-256": 8
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 54
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 7,
          "FIPS 180-4": 5,
          "FIPS 186-2": 1,
          "FIPS 186-4": 8,
          "FIPS 198-1": 5,
          "FIPS18": 4,
          "FIPS186": 4,
          "FIPS186-4": 27
        },
        "NIST": {
          "SP 800-135": 3,
          "SP 800-38A": 3,
          "SP 800-38D": 1,
          "SP 800-56A": 6,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS 1": 2
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 44,
            "AES-": 7,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 3
          },
          "CAST": {
            "CAST": 44
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 44
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 8
        },
        "IBM": {
          "SSC": 3
        }
      },
      "tls_cipher_suite": {
        "TLS": {
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20260706103113-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260706103113-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1331820,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin",
          "https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/advanced-url-filtering/advanced-url-filtering-administration.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 82
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "c24aefadbb3dc6cf0f98bd8b134c733d66982e231d4565f4c055041210951532",
      "txt_hash": "91f78e18743962a5f83b67090b07ec3ef862fba0f3f5ec1c6287361cbaad60a6"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
    "date_sunset": "2029-08-22",
    "description": "The Panorama 10.2 running on M-200, M-300, M-600 and M-700 from Palo Alto Networks Inc., hereafter referred to as \"Panorama M-Series\", \"Panorama HW\", \"modules\", or the \"cryptographic modules\" are multi-chip standalone cryptographic modules designed to fulfill FIPS 140-3 level 2 requirements. Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 3",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Panorama 10.2 M-200, M-300, M-600 and M-700",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-07-06",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Palo Alto Networks Inc.",
    "vendor_url": "http://www.paloaltonetworks.com"
  }
}

Sections

Panorama 10.2 M-200, M-300, M-600 and M-700

Certificate #5367

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Trusted Execution Environments

Security level

Certification process

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

New certificate

Raw data

Sections

Panorama 10.2 M-200, M-300, M-600 and M-700

Certificate #5367

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Device

Trusted Execution Environments

Security

Security level

Certification process

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data